2 modes : interactive mode Ask you just before each process creation instead of secure mode which only allow execution of trusted programs (the best way for network administrators to prevent unwanted usage of computer...)